All Apps and Add-ons

Install collectd

bbhandari012
Explorer

How do i download the collectd app for splunk ? and configured it with splunk forwarder ?

0 Karma

nexinto
New Member

The graphite plugin seems to be fine, but we need more infos's.

here is an example of our plugin:

LoadPlugin write_graphite

Host "hostname-relay"
Port "xxxxx"
StoreRates false
AlwaysAppendDS false
EscapeCharacter "."
SeparateInstances true

Did you try to get some data into your indexer?
At your splunk server you have to configure data inputs for your specific collectd port. ( TCP)

0 Karma

bbhandari012
Explorer

I opened the port as well on the indexer.
telnet 52.33.140.2 10001
Trying 52.33.140.2...
Connected to 52.33.140.2.
Escape character is '^]'.

This is the output from the indexer
/opt/splunk/bin/splunk enable listen 10001 -auth admin:abc123
Configuration for port 10001 already exists.

netstat -anp | grep 10001
tcp 0 0 0.0.0.0:10001 0.0.0.0:* LISTEN 23735/splunkd

Yes, i tried to get the data into the index.
LoadPlugin cpu
LoadPlugin df
And here is the error msg on the client machine,
forwarder collectd[21107]: write_graphite plugin: send to 52.33.140.2:10001 (tcp) failed with status -1 (Broken pipe)

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Go to the app page on splunkbase, hit the big green VISIT SITE button, get redirected to https://github.com/nexinto/collectd and follow instructions there.

0 Karma

bbhandari012
Explorer

I followed the instruction, but no luck. I installed the collectd in my indexer as well as on client machine. On indexer i allowed the port 10001 as well. But i am gettting the following error on the client.
Mar 15 01:30:16 forwarder collectd[21107]: write_graphite plugin: send to 52.33.140.2:10001 (tcp) failed with status -1 (Broken pipe)

My collectd.conf
Plugin write_graphite

Host "52.33.140.2"          # here goes the splunk indexer / tcp input
Port "10001"
Protocol "tcp"
0 Karma

kbrown_splunk
Splunk Employee
Splunk Employee

On Linux try netcat to confirm your connection is open
or
telnet 52.33.140.2 10001

Also your collectd.conf does not look like it is in the XML format shown in the readme

collectd.conf:




Host "127.0.0.1" # log to the localhost
Port "5000"
Protocol "tcp"


0 Karma

bbhandari012
Explorer

There is the connection, i verified with the telnet. Its in xml format as well.

Host "52.33.140.2"
Port 10001
 Protocol "tcp"
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...